zoukankan      html  css  js  c++  java
  • Zabbix监控事件日志

    新建服务:eventlog[System,,,"Service control Manager",^7045$,,skip]

    新建任务计划:eventlog[Microsoft-Windows-TaskScheduler/Operational,,,"TaskScheduler",^106$,,skip]

    删除任务计划:eventlog["Microsoft-Windows-TaskScheduler/Operational",,,"TaskScheduler",^141$,,skip]

    修改组策略:eventlog[Security,,,,4739,,]

    删除安全日志:eventlog[Security,,,,1102,,]

    删除用户:eventlog[Security,,,,4726,,]

    用户登录:eventlog[Security,,,,4722,,]

     A member was added to a security-enabled global group:eventlog[Security,,,,4728,,]

    trigger:

    {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].logseverity(0)}>1 and {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].nodata(600)}=0 and ({Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Admins)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Management)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Group Policy)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(RODC)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Controllers)}=1 )
    View Code

    A member was added to a security-enabled universal group:eventlog[Security,,,,4756,,]

    A memeber was added a security-enabled local group:eventlog[Security,,,,4732,,]

    A security-enabled global group was deleted:eventlog[Security,,,,^4730$]

    A security-enabled universal group was deleted:eventlog[Security,,,,^4758$]

  • 相关阅读:
    django在admin后台注册自己创建的数据库表
    django的缓存机制
    python中eval函数作用
    falsk之文件上传
    django请求的生命周期
    mongodb高级操作
    mongodb基本操作
    mongodb安装教程
    flask之jinjia2模板(二)
    Maven系列--"maven-compiler-plugin"的使用、Maven之Surefire插件
  • 原文地址:https://www.cnblogs.com/dreamer-fish/p/15723092.html
Copyright © 2011-2022 走看看